Advisories · Technology
RiceTheme Felan Framework.
Every CVE that names RiceTheme Felan Framework among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
WordPress Felan Framework plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
- RiceTheme Felan Framework
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Felan Framework plugin <= 1.1.3 - SQL Injection vulnerability
- RiceTheme Felan Framework
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Felan Framework plugin <= 1.1.3 - Account Takeover vulnerability
- RiceTheme Felan Framework
- Authentication bypass
- CVSS 5.3 Medium
Felan Framework <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation/Deactivation via process_plugin_actions
- RiceTheme Felan Framework
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Felan Framework <= 1.1.4 - Hardcoded Credentials
- RiceTheme Felan Framework
- Hard-coded credentials